Security, stated plainly.
How Otobiz protects customer conversations, connected channels, and the actions your team takes.
Controls in place.
The practical safeguards that protect customer conversations and connected channels today.
- Business data separation
Messages, contacts, and files are kept inside the business they belong to. Database policies and server checks prevent one business from opening another's records.
- Database-enforced separation
- Access refused outside the invited business
- Encrypted channel credentials
Access tokens for connected channels are encrypted before storage. The encryption key is managed separately, and disconnecting a channel removes its stored access.
- Credentials encrypted before storage
- Key material managed separately
- Team and branch access
Only invited teammates can open a business account. Branch access can separate locations, and removing a teammate ends their access.
- Invite-based team access
- Branch access for multi-location teams
- Approval controls
Campaigns and selected higher-risk actions can wait for review. Approval is tied to the exact content, and an edit requires a fresh review.
- Exact message reviewed before sending
- Changed content requires new approval
- Traceable sends
Each send keeps the message, recipient, reviewer, and delivery result returned by the channel. A repeated request does not send the same message twice.
- Message and reviewer kept together
- Delivery status kept with the send
- Encryption and recovery
Customer connections to Otobiz use verified TLS. Channel credentials and backups are encrypted at rest, and backups are retained for recovery. Deleted records may remain in encrypted backups until those copies expire.
- Verified TLS for customer connections
- Encrypted backups retained for recovery
Current limits.
Clear answers for a security or procurement review.
- SOC 2 and ISO 27001
- Not currently available.
- SSO and directory provisioning
- Not currently available. Teammates are invited and managed inside Otobiz.
- Customer-selected data region
- Not currently available. Otobiz runs in one cloud region.
- Tamper-evident compliance archive
- Not currently available. Send records are practical product history, not an immutable external archive.
Need a closer review?
Send us your security questions. We will answer from the current product and say clearly when something is not available.
Also see our terms of service.